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Top Stories 

• Five people, including three bank tellers at branches in New York and Florida, were 
indicted September 16 in White Plains, New York, for allegedly running an identity theft 
and bank fraud ring that stole over $850,000. - Lower Hudson Valley Journal News (See 
item 7) 

• More than 600,000 gallons of manure spilled from the Kurt DeGrave farm in the Town of 
Brussels, Wisconsin, into Sugar Creek September 16 with cleanup expected to take several 
days. - WLUK 11 Green Bay (See item 15) 

• A Detroit-area cancer doctor pleaded guilty September 16 to convincing patients to 
undergo unnecessary cancer treatments and then billing insurers roughly $225 million in 
claims over 6 years. - Associated Press (See item 22) 

• Fire crews reached 5 percent containment September 18 of the 70,944-acre King Fire 
burning in El Dorado County, California, that threatens more than 3,500 homes and 
structures. - KXTV 10 Sacramento (See item 24) 
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Energy Sector 



1. September 18, WAVE 3 Louisville - (Kentucky) Gas leak on U.S. 42 capped, 
thousands return home without gas service. Evacuation orders for homes around a 
Louisville Gas and Electric (LG&E) gas main in Prospect were lifted after crews 
capped the leak that left three workers injured while they were performing maintenance 
work September 17. About 2,700 LG&E customers will remain without gas service for 
up to 3 days due to the incident. 

Source: http://www.wave3.com/story/26561921/gas-leak-on-us-42-capped-residents- 
cleared-to-retum-home 

2. September 17, KTRK 13 Houston - (Texas) Baytown FD: Lightning strikes oil tank, 
causing big explosion. Two Line Energy-operated oil tanks in Baytown caught fire and 
exploded September 17 due to lightning strikes produced by storms. No injuries were 
reported and firefighters contained and put out the fires. 

Source: http://abcl3.com/news/bavtown-fd-lightning-strikes-oil-tank-causing-big- 
explosion/3 12773/ 

3. September 17, Securityweek - (International) Website of U.S. oil and gas company 
abused in watering hole attack. Researchers at Bromium found that attackers injected 
malicious code into the Web site of an unnamed U.S. oil and gas company in an effort 
to infect the computers of its visitors, known as a watering hole attack. The malicious 
script used on the compromised Web site utilized the Internet Explorer vulnerability 
CVE-2013-7331 which allows resources loaded into memory to be queried. 

Source: http://www.securityweek.com/website-us-oil-and-gas-companv-abused- 
watering-hole-attack 

For another story, see item 33 
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Chemical Industry Sector 

See item 33 
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Nuclear Reactors, Materials, and Waste Sector 

4. September 17, Carlsbad Current-Argus - (New Mexico) LANL identifies second 
nuclear waste drum like container that was breached at WIPP. Officials at the Los 
Alamos National Laboratory (LANL) identified a second drum of nuclear waste at the 
Waste Isolation Pilot Plant in Carlsbad with similar contents to the drum that caused a 
radiation leak in February. A LANL official stated that scientists were unable to 
recreate the exact conditions that triggered the February release and were continuing to 
investigate. 

Source: http://www.abqiournal.com/463801/abqnewsseeker/lanl-identifies-second- 
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nuclear-wast-drum-like-container-that-breached-at-wipp.html 
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Critical Manufacturing Sector 

5. September 17, New York Times - (National) N.H.T.S.A. posts recall of 25,000 Fiat 
500L models. Fiat Chrysler announced a recall released September 17 for around 
25,500 model year 2014-2015 Fiat 500L vehicles due to irregularities in the driver’s 
side knee airbags that could prevent them from inflating properly during an accident. 
Source: http://www.nvtimes.com/2014/09/18/automobiles/nhtsa-posts-recall-of-25000- 
fiat-5001-models.html 



For another story, see item 33 
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Defense Industrial Base Sector 

See item 33 
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Financial Services Sector 

6. September 17, Bloomberg News - (Maryland; Delaware) Nightclub insurer charged 
in $100 million fraud. The owner of Maryland -based Indemnity Insurance Corp., was 
indicted in federal court in Baltimore September 16 for allegedly using fraudulent 
financial documents to show that his company was in better financial health than it was 
and for deceiving Delaware and federal regulators. The indictment seeks to recover 
over $100 million in premiums paid by clients of the firm that specialized in insuring 
nightclubs and other entertainment facilities. 

Source: http://www.bloomberg.com/news/2014-09-17/nightclub-insurer-charged-in- 
100-million-fraud.html 

7. September 17, Lower Hudson Valley Journal News - (National) Bank tellers helped 
steal identities, $850G, A.G. says. Five people, including three bank tellers at 
branches in New York and Florida, were indicted September 16 in White Plains, New 
York, for allegedly running an identity theft and bank fraud ring that stole over 
$850,000 in funds as well as customers’ personal information over at least 4 years. The 
tellers allegedly supplied information to their co-conspirators that enabled them to 
create fraudulent checks, driver’s licenses, and other documents used to withdraw the 
stolen funds from bank branches in Connecticut, Massachusetts, and New York. 

Source: http://www.lohud.com/storv/news/local/westchester/2014/09/16/officials-bank- 
tellers-others-stole-identities-k/1 5744627/ 
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8. September 16, U.S. Attorney ’s Office, Northern District of Ohio - (International) 



Former Gates Mills man indicted for defrauding investors of millions of dollars. A 

former Gates Mills, Ohio resident and Mexican national was indicted September 16 for 
allegedly running a $9.6 million investment scheme that defrauded investors in Florida, 
New Jersey, New York, and Ohio. The FBI stated that the man was believed to have 
fled the Cleveland area and asked for the public’s help in determining his whereabouts. 
Source: http://www.fbi.gov/cleveland/press-releases/2014/former-gates-mills-man- 
indicted-for-defrauding-investors-of-millions-of-dollars 

9. September 16, U.S. Attorney ’s Office, Southern District of Texas - (Texas) Tanzanian 
national guilty in tax fraud scheme involving more than 600 victims. A Houston 
resident and Tanzanian national pleaded guilty September 16 for running an identity 
theft and tax fraud scheme that caused over $1.8 million in losses and affected more 
than 600 victims. The man used stolen personal information to impersonate others and 
file fraudulent tax returns in their names. 

Source: 

http://www.iustice.gov/usao/txs/lNews/Releases/2014%20September/140916%20- 

%20Mtaza.html 

10. September 15, U.S. Attorney’s Office, Eastern District of California - (California) 

Leader of multi-million dollar foreclosure rescue fraud convicted. A Brentwood, 
California man who operated a business known as KATN was found guilty September 
15 for operating a foreclosure rescue fraud scheme that defrauded homeowners of more 
than $5.8 million and paid over $2.5 million into his and his co-conspirators’ accounts. 
The man and his co-conspirators tricked homeowners in California and other States 
into paying fees to KATN with the promise of paying or forgiving mortgages but used 
the fees for personal expenses. 

Source: http://www.iustice.gov/usao/cae/news/docs/2014/2014 09/09- 15-14Tikal.html 
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Transportation Systems Sector 

11. September 17, Chicago Tribune - (Maine; Illinois) Mechanical, health issues force 
O’Hare flight to Brussels back to Chicago. A United Airlines flight headed to 
Brussels, Belgium, September 16 returned to Chicago’s O’Hare International Airport 
September 17 due to medical and mechanical issues. The flight made an unscheduled 
landing at Bangor International Airport in Maine after a customer experienced a 
medical issue and once it was resolved, the flight departed for Brussels only to return to 
O’Hare due to a mechanical issue. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-mechanical-health- 
issues-force-ohare-flight-to-brussells-back-to-chicago-20140917-storv.html 

12. September 17, New London The Day - (Connecticut) Police: Sleeping driver caused 
crash that closed 1-95 in Waterford. Northbound lanes on Interstate 95 near 
Waterford closed for 3 hours after a semi-truck rolled onto its side and blocked the 
road. No injuries were reported. 

Source: 
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http://www.thedav.com/article/20140916/NWS04/140919744/1070/FRQNTPAGE 



13. September 17, Arlington Heights Cardinal - (Illinois) Rollover truck crash with 
injuries on Dundee Rd at Portwine Rd, Wheeling, Prospect Heights. At least three 
people were injured in a multi- vehicle accident September 17 when a dump truck 
collided with another vehicle on Dundee Road in Wheeling, Illinois, blocking both 
directions for about 5 hours. 

Source: http://www.arlingtoncardinal.com/2014/09/rollover-truck-crash-with-injuries- 
on-dundee-rd-at-portwine-rd-wheelingprospect-heights/ 

14. September 15, KCNC 4 Denver - (Colorado) Pregnant woman, young girl killed in 
Weld County Crash. Highway 14 in Weld County was closed for 5 hours following an 
accident that killed 2 people and injured 2 others when a pickup truck collided with a 
semi-truck hauling logs September 15. 

Source: http://denver.cbslocal.com/2014/09/15/two-killed-in-weld-county-crash/ 

For additional stories, see items 1 and 24 



[ Return to top ] 

Food and Agriculture Sector 

15. September 18, WLUK 11 Green Bay - (Wisconsin) Manure spill cleanup continues. 
More than 600,000 gallons of manure spilled from the Kurt DeGrave farm in the Town 
of Brussels in Door County into Sugar Creek September 16. Wisconsin Department of 
Natural Resources officials reported that there was no indication of groundwater 
contamination after crews stopped the leak and began using vacuum trucks to clean the 
spill, expected to take several days. 

Source: http://fox 1 1 online.com/20 1 4/09/ 1 7/manure-spill-cleanup-continues/ 

16. September 18, Pittsburgh Tribune -Review - (Ohio) Fire ravages Dayton area meat- 
packing plant. Authorities are investigating a September 17 fire at the Dayton Packing 
meat-processing facility in Ohio, which damaged more than half of the structure, 
business equipment and supplies, and at least $30,000 worth of meat. 

Source: http://triblive.com/news/armstrong/6812486-74/fire-lockhart-building 

17. September 17, KCPQ 13 Tacoma - (Washington) Health department warns of 
possible food contamination in McDonald’s sewage overflow. A McDonalds 
restaurant in Bellevue, Washington, was closed indefinitely September 17 after a 
customer reported a sewage backup found inside the restaurant due to plumbing issues. 
Health officials issued a potential contamination warning to customers who ate food 
from the restaurant. 

Source: http://ql3fox.com/2014/09/17/health-department-warns-of-possible-food- 
contamination-in-mcdonalds-sewage-overflow/ 

18. September 17, Associated Press - (New Mexico) Group levels abuse allegations 
against NM dairy. Winchester Dairy officials fired all employees and halted milking 
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operations and shipments to vendors indefinitely September 17 while the New Mexico 
Livestock Board investigates allegations of animal abuse at the facility shown through 
video footage presented to the board September 11. 

Source: http://news.msn.com/us/group-levels-abuse-allegations-against-nm-dairy 

19. September 15, U.S. Department of Labor - (West Virginia) Over 40 safety and health 
violations found at Wayne Lumber and Mulch Inc. Wayne Lumber and Mulch Inc., 
was cited by the Occupational Safety and Health Administration for 44 safety and 
health violations at the company’s sawmill in Wayne following inspections in March 
and July. Proposed penalties total $85,080. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26706 
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Water and Wastewater Systems Sector 

20. September 18, University of Florida Independent Florida Alligator - (Florida) 
Precautionary boil- water notice in City of Newberry. The city of Newberry in 
Florida was placed under a boil water advisory until further notice after a water main 
broke September 16, prompting authorities to shut off the water for 4 hours. 

Source: http://www.alligator.org/news/local/article 5966b67e-3ee6-lle4-a744- 
af4d90b39c66.html 

21. September 17, Kitsap Sun - (Washington) Broken pipe at PSNS results in sewage 
spill, beach closure. Health officials issued a no-contact advisory for waterways in 
Sinclair Inlet and Port Washington Narrows after 45,000 gallons of sewage spilled at 
Puget Sound Naval Shipyard when a sewer line running along the beach broke 
September 14. The advisory will remain in effect through September 21. 

Source: http://www.kitsapsun.com/news/local-news/broken-pipe-at-psns-results-in- 
sewage-spill-beach-closure 30807529 

For additional stories, see items 15 and 33 
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Healthcare and Public Health Sector 

22. September 17, Associated Press - (Michigan) Michigan doctor admits giving 

patients unnecessary cancer treatments. A Detroit-area cancer doctor pleaded guilty 
September 16 to convincing patients to undergo unnecessary cancer treatments and 
then billing insurers. The doctor submitted roughly $225 million in claims to Medicare 
and private insurers over 6 years for chemotherapy and other cancer treatments. 
Source: http://www.foxnews.com/us/2014/09/17/michigan-doctor-admits-giving- 
patients-unnecessary-cancer-treatments/ 
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23. September 16, Associated Press - (National) Probe: Healthcare.gov website must 
boost security. The U.S. Government Accountability Office released a report 
September 16 stating that the Web site for the national healthcare program contained 
over 20 specific security issues related to who can access and make changes to the 
network. Representatives from the U.S. Department of Health and Human Services 
responded and stated that officials have acted on many recommendations provided in 
the report. 

Source: http://news.vahoo.com/probe-healthcare-gov-website-must-195439163.html 
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Government Facilities Sector 

24. September 18, KXTV 10 Sacramento - (California) King Fire now at 70,944 acres; 
more than 2,000 homes threatened. Fire crews reached 5 percent containment 
September 18 of the 70,944-acre King Fire burning in El Dorado County. More than 
2,000 homes and 1,500 structures are threatened while evacuation orders for hundreds 
of people remained in place. 

Source: http://www.newsl0.net/storv/news/local/eldorado-hills/2014/09/18/king-fire- 
bums-27930-acres-el-dorado-county-thursday/l 58 16425/ 

25. September 18, Help Net Security - (International) Hackers penetrated systems of key 
defense contractors. The computer systems of U.S. Transportation Command 
(TRANSCOM) contractors were successfully hacked by individuals associated with the 
Chinese government at least 20 times in one year, the Senate Armed Services 
Committee found. TRANSCOM was only aware of 2 intrusions but an investigation 
determined that in a 12-month period there were about 50 intrusions or other cyber- 
related events into their computer networks. 

Source: http://www.net-securitv.org/secworld.php?id=17375 

26. September 18, Reuters - (Missouri) Man charged in attempted fire bombing of 
Missouri congressman’s office. Authorities arrested a man and charged him 
September 17 with attempting to fire-bomb the Kansas City office of a Missouri 
congressman using two bottles filled with charcoal lighter fluid September 11. The 
building was empty and neither bottle went through the window during the incident. 
Source: http://news.msn.com/crime-iustice/man-charged-in-attempted-fire-bombing-of- 
missouri-congressmans-office 

27. September 17, KDKA 2 Pittsburgh - (Pennsylvania) 3 Pittsburgh public schools 
evacuated due to threat. About 850 students from Pittsburgh West Liberty, Pittsburgh 
South Brook, and Pittsburgh Pioneer schools in Pennsylvania were evacuated 
September 17 due to a phoned bomb threat. Police issued an all-clear after spending the 
school day searching for any suspicious items. 

Source: http://pittsburgh.cbslocal.com/2014/Q9/17/3-pittsburgh-public-schools-being- 
evacuated-due-to-threat/ 
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28. September 17, WSBT 22 South Bend - (Indiana) Man arrested after mailing white 
powder, bomb threat to courthouse. Police arrested a man in connection to the 
mailing of a white powder and a bomb threat to the LaPorte County Clerk’s Office 
September 17. The courthouse was evacuated while authorities investigated and 
determined the white powder was harmless and the bomb threat was unsubstantiated. 
Source: http://www.wsbt.com/news/local/suspect-in-custody-after-mailing-white- 
powder-bomb-threat-to-courthouse/28 1 1 1326 

29. September 17, WFSB 3 Hartford - { Connecticut) Classes canceled at Wolcott High 
School due to gas leak concerns. School officials cancelled classes at Wolcott High 
School in Connecticut September 17 due to concerns of a potential gas leak. Crews 
responded and shut off the gas before determining there was no leak. 

Source: http://www.wfsb.com/storv/26554553/wolcott-high-school-evacuated-due-to- 
gas-odor 

30. September 17, Syracuse.com - (New York) 4 residence halls evacuated during 
Cazenovia College bomb scare. Four residence halls at Cazenovia College in New 
York were evacuated for 2 hours September 16 after the school received a bomb threat. 
Police searched the buildings and issued an all-clear once nothing suspicious was 
found. 

Source: 

http://www.svracuse.eom/news/index.ssf/2014/09/4 residence halls evacuated during 
cazenovia college bomb scare.html 

For another story, see item 21 
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Emergency Services Sector 

31. September 15, Memphis Flyer - (Tennessee) State issues alternative emergency 
numbers for cell phones. The Tennessee Emergency Communications Board and the 
Tennessee Emergency Management Agency issued a new phone number to replace 9- 
1-1 when dialing from a cell phone to several counties in west Tennessee September 15 
in response to a disruption that caused calls made from cell phones to be rerouted due 
to flood damaged equipment. 

Source: http://www.memphisflver.com/NewsBlog/archives/2014/09/15/state-issues- 
alternate-emergency-number-for-cell-phones 
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Information Technology Sector 

32. September 18, Securityweek - (International) Apple fixes “backdoors” with release of 
iOS 8. Apple released the newest version of its mobile operating system, iOS 8, 
September 17, which adds improvements and closes over 50 security vulnerabilities. 
Source: http://www.securityweek.com/apple-fixes-backdoors-release-ios-8 
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33. September 17, Threatpost - (International) Series of vulnerabilities found in 
Schneider Electric SCADA products. An advisory from the Industrial Control 
Systems Cyber Emergency Response Team (ICS-CERT) warned users of Schneider 
Electric StruxureWare SCADA Expert ClearSCADA products after researchers 
discovered unpatched, remotely-exploitable vulnerabilities. Included in the 
vulnerabilities is a cross-site scripting (XSS) issue that could allow industrial control 
systems (ICS) to be shut down, while an authentication bypass issue could give 
attackers access to sensitive information. 

Source: http://threatpost.com/series-of-vulnerabilities-found-in-schneider-electric- 
scada-products 

34. September 17, Securityweek - (International) AppBuyer iOS malware targets 
jailbroken iPhones. Researchers with Palo Alto Networks analyzed a piece of iOS 
malware discovered by WeiPhone Technical Group in May and found that the malware 
dubbed AppBuyer is targeting jailbroken iPhones in order to steal Apple ID and 
password information and make unauthorized purchases from the App Store. 

Source: http://www.securitvweek.com/appbuver-ios-malware-targets-iailbroken- 
iphones 

35. September 17, SC Magazine - (International) Analysts spot ‘Critolock,’ ransomware 
claims to be CryptoLocker. Researchers at Trend Micro identified a new piece of 
ransomware known as Troj_Critolock.A or Critolock that infects devices and encrypts 
users’ data and demands a ransom. The malware purports to be the CryptoLocker 
ransomware but contains several differences including its use of the Rijndael 
symmetric-key algorithm. 

Source: http://www.scmagazine.com/analvsts-spot-critolock-ransomware-claims-to-be- 
cryptolocker/article/372 1 82/ 

36. September 17, Threatpost - (International) Drupal patches XSS vulnerability in 
spam module. Drupal released a patch September 17 for the Mollom spam and content 
moderation module that closes a cross-site scripting (XSS) vulnerability that could 
allow an attacker to gain admin-level access to Web sites and enable them to steal data 
or hijack sessions. 

Source: http://threatpost.com/drupal-patches-xss-vulnerability-in-spam-module 
For another story, see item 3 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



37. September 16, KHON 2 Honolulu - (Hawaii) Full service has been restored to all 
Hawaiian Telecom customers affected by broken fiber cable. Full service was 
restored to about 600 Hawaiian Telecom customers in Puuloa September 16 after being 
down for nearly 12 hours when a fiber cable was cut during construction work 
September 15, causing disruption to telephone, Internet, and TV services. 

Source: http://khon2.corn/2014/09/15/fiber-cable-cut-disrupts-service-in-kalihi-palama- 
area / 



For another story, see item 31 
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Commercial Facilities Sector 

38. September 18, Los Angeles Register - (California) La Verne seniors without power 
for more than 24 hours. About 400 residents at the Fountains Mobile Home Park in 
La Veme were without power for more than 24 hours after a transformer overloaded 
and blew September 16. Crews were expected to complete repairs September 17, while 
residents were voluntarily relocated to another location due to temperatures that 
exceeded 100 degrees. 

Source: http://www.losangelesregister.com/articles/power-604992-customers- 
residents.html 

39. September 18, WPTV 5 West Palm Beach - (Florida) Vero Beach man, 24, accused of 
making, possessing explosives. A Florida man was arrested September 17 on charges 
related to the manufacturing of explosive materials after authorities discovered at least 
three completed explosive devices and bomb making materials while searching the 
suspect’s home and a storage unit rented by the suspect. The area surrounding the 
storage unit and home were evacuated while police removed the materials. 

Source: http://www.wptv.com/news/region-indian-river-countv/vero-beach/devon- 
ryerson-24- year-old- vero-man-arrested-for-making-and-possessing-explosives-sheriff- 
says 

40. September 17, WDRB 41 Louisville - (Kentucky) Shepherdsville Police accuse 
Amazon employee of stealing over $100,000 of merchandise. Authorities arrested 
and charged a former Amazon employee September 16 after she admitted to stealing 
over $100,000 in merchandise from her employer since 2012. The stolen property was 
recovered by police during a search of the suspect’s home. 

Source: http://www.wdrb.com/storv/26556251/shepherdsville-police-accuse-amazon- 
emplovee-of-stealing-over-10000-of-merchandise 

41. September 17, KTVU 2 Oakland - (California) Sewage problem evacuates Petaluma 
Target store. A Target store in Petaluma was evacuated September 16 while officials 
investigated a sulfur-type odor inside the building, which was later traced to a 
malfunctioning sewer drain in a janitorial area of the store. Authorities evaluated 40 
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individuals at the scene, including four that received medical treatment, and the store 
reopened after the drain was repaired and the building was ventilated. 

Source: http://www.ktvu.com/news/news/local/sewage-problem-evacuates-petaluma- 
target- store/nhPRG/ 

42. September 16, WJLA 7 Washington, D.C. - (Virginia) Alexandria's King Street 
reopens after water main break repairs completed. About 12 businesses in 
Alexandria, Virginia, were without water service for over 15 hours September 16 after 
an 8-inch cast iron water main ruptured. Crews repaired the line and reopened the King 
Street thoroughfare to traffic about 16 hours after the break was reported. 

Source: http://www.wila.com/articles/2014/Q9/king-street-water-main-break-will- 
require-all-day-repairs- 107 175.html 

For another story, see item 6 
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Dams Sector 



Nothing to report 
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